The news
A service that appeared on the dark web this week is selling access to digital scans of more than 153 million driver’s licenses belonging to people in the United States and Canada. The Federal Bureau of Investigation’s New Orleans field office has opened an official inquiry into the origin of the images. Interviews with individuals whose licenses appear for sale indicate the data is being drawn from records held by a widely used identity-verification company based in Louisiana.
Context
Until this week, large-scale sales of driver’s-license images on underground markets were uncommon. Most identity-theft services focused on smaller batches of Social Security numbers, credit-card data, or account credentials. The new offering represents a shift toward bulk distribution of government-issued photo identification, which can be used to open accounts, bypass verification checks, or support other forms of fraud. The timing of the FBI’s inquiry suggests investigators are treating the case as a possible large-scale compromise rather than isolated leaks.
The marketplace surfaced without prior public warning. KrebsOnSecurity reported that the service went live and drew immediate attention from law enforcement. The New Orleans field office began its inquiry on the same day the marketplace launched. No public statement has been issued by the company believed to be the source, and it remains unclear how the images were removed from its systems.
Details
The service claims to hold scans from more than 153 million individuals. People contacted by KrebsOnSecurity confirmed that their license images and personal details are listed for purchase. The pattern of the data matches records collected during identity-verification processes, pointing to a single Louisiana company that supplies such services to many organizations.
The FBI inquiry is limited to the New Orleans field office at this stage. Investigators are examining how the images reached the dark-web marketplace and whether the Louisiana firm experienced a breach or an insider incident. The article notes that the data appears to be drawn directly from verification workflows rather than from state motor-vehicle databases.
Affected individuals who spoke with KrebsOnSecurity described seeing their own license photos and biographical details offered for sale. These confirmations helped narrow the source to the Louisiana firm, which performs identity checks for banks, fintech companies, and other businesses that must comply with customer-verification rules.
No technical details about the extraction method have been released. The FBI has not disclosed whether it has identified the operators of the marketplace or recovered any of the data.
Reactions / counterpoints
The Louisiana company has not issued a statement confirming or denying involvement. KrebsOnSecurity reported no response from the firm despite the FBI inquiry and the public reporting. Individuals whose records appear in the marketplace have received no official notification from either the company or law enforcement.
Why it matters
Driver’s-license images contain both a photograph and a set of biographical details that many online services accept as proof of identity. When those images circulate in bulk, the verification step that companies rely on to open accounts or reset passwords loses its value. Organizations that use the Louisiana firm’s service now face the possibility that their own customers’ records have been exposed, even if they never suffered a direct breach.
The FBI’s involvement indicates the scale is large enough to warrant federal attention, yet the absence of any confirmation from the company leaves affected individuals without clear guidance on what steps to take. For now, the only confirmed facts are the size of the offering, the geographic scope, and the start of an official inquiry; everything else remains under investigation.
The incident also highlights how concentrated identity-verification work has become. A single vendor handling checks for hundreds of millions of people creates a single point of failure. If the Louisiana firm’s systems were accessed, the downstream effects reach far beyond its own customers and into any service that accepted its verification results.
---
Sources:
{
"word_count": 682,
"sources_used": 2,
"headline": "FBI Opens Inquiry Into Dark Web Service Selling Scans of 153 Million Driver’s Licenses"
}
No comments yet